OpenAI Codex security directory

CircleCI

Published by CircleCI

High risk

Brings CircleCI build and pipeline workflows into Codex. Investigate failed jobs, diagnose flaky tests and improve CI configuration. Inspect, trigger or rerun jobs with the CLI, with additional support for CircleCI Chunk.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Can trigger and rerun CI/CD pipelines: Can deploy code, applications, containers, workflows, or infrastructure to a persistent environment.
  • Edits CI configuration and code and creates branches: Can create or change persistent records, files, projects, permissions, settings, or credentials.
  • Uses long-lived CircleCI, GitHub and model-provider credentials: Uses credentials, OAuth grants, API keys, or tokens that may remain valid after the current session.
  • Runs CircleCI and Chunk CLIs, including remote sidecar exec and SSH: Can execute code, commands, scripts, unrestricted queries, or dynamic gateway actions.
  • Chunk opens pull requests through the connected GitHub App: Can send messages, comments, invitations, posts, or published content attributed to the connected user.
  • Pipeline triggers and Chunk tasks consume paid CircleCI credits: Can initiate purchases, paid jobs, payments, refunds, infrastructure spend, or other financial activity.

Available capabilities

This add-on exposes 4 tools or capabilities.

  • circleci-builds
  • chunk
  • circleci-cli
  • circleci-config

The interactive security report will load automatically.